350-601 Premium Exam Questions

Table Description automatically generated with low confidence

SPAN (Switched Port Analyzer) is a feature that allows network traffic from one or more source ports to be mirrored to a destination port for analysis. When configuring SPAN on a Cisco Nexus 5000 Series switch, two characteristics must be considered:

• A SPAN source port can be monitored in multiple SPAN sessions. This means that the same port can send traffic to different destination ports for different purposes or applications.
• A SPAN source port cannot be a destination SPAN port. This means that a port cannot receive traffic from another port that it is already monitoring. This prevents loops and conflicts in the SPAN configuration.

References := Configuring SPAN

https://www.cisco.com/en/US/docs/switches/datacen ter/nexus5000/sw/configuration/guide/cli_rel_4_1/Cisco_Nexus_5000_Series_Switch_CLI_Software_Configuration_Guide_chapter50.html

 The command aaa authentication login default group ISE local configures the Cisco Nexus Series Switch to use TACACS+ for authentication by default and specifies a fallback to local authentication if the TACACS+ server becomes unavailable. This ensures that users are authenticated against the TACACS+ server when it is available, but allows them to use local switch credentials if the server cannot be reached, meeting the requirement for failover to local account1.

References :=

• Cisco documentation on configuring TACACS+ for Cisco Nexus Series Switches provides detailed steps and explanations for setting up authentication and ensuring failover to local accounts

 To automate the provisioning of Cisco ACI objects using Terraform while ensuring that APIC counts the authentication login requests against the threshold to avoid a DOS attack, signature-based authentication should be used. This method involves obtaining an authentication token from Cisco APIC, which will use the token to authenticate. However, APIC counts these authentication requests and applies a threshold to prevent DOS attacks. After too many attempts, the user ID and password authentication method may fail as the threshold is exceeded. To circumvent this issue, signature-based authentication is recommended, where a signature is calculated using a private key and passed with the request. This signature is then used to authenticate the user without being counted against the threshold, thus avoiding the risk of exceeding it and failing authentication.

References: The information is based on the Terraform documentation provided by CiscoDevNet